RainmakerLog in
Back to home

Privacy Policy

Last updated: 21 October 2026

This Privacy Policy explains how Rainmaker Network LTD, a company registered in the Republic of Cyprus under registration number HE 415834 (“Rainmaker”, “we”, “our” or “us”), collects, uses, stores and protects information in connection with the Rainmaker Studio platform available at tt.rainmakeragency.ai (the “Service”). We act as the data controller for personal data processed through the Service and are committed to handling it in accordance with the EU General Data Protection Regulation (GDPR).

The Service is a business tool for authorised marketing professionals: it presents TikTok trend and advertising data, helps create short videos, and publishes them to social accounts that you connect. By accessing the Service or connecting a TikTok, Facebook, Instagram or Threads account, you agree to the practices described in this Privacy Policy.

1. Information we collect

We collect the following categories of information:

  • Account information. When an account is created for you, we collect your name, email address, role and authentication credentials (stored in hashed form).
  • TikTok account data. When you authorise a TikTok account through TikTok’s official OAuth flow, we access data made available by the TikTok Business API — such as your account profile, advertiser identifiers, and aggregated trend, hashtag, sound, search and video analytics. We request only the permission scopes required to operate the Service.
  • Facebook, Instagram and Threads account data. When you connect an account through Meta’s official login, we receive and store your Meta user ID and name, the IDs and names of the Facebook Pages, Instagram professional accounts and Threads profile you choose, and access tokens for them (encrypted at rest). For posts you publish through the Service we store the caption, the publishing status and the link to the published post.
  • Content you create. Briefs, prompts, images and videos you create or upload in the Service.
  • Usage data. We automatically collect technical information such as IP address, browser and device type, and interactions with the Service, for security, diagnostics and product improvement.
  • Cookies. We use strictly necessary cookies to keep you signed in and to secure your session.

2. How we use information

We use the information we collect to:

  • Provide, operate and maintain the Service and display TikTok analytics to authorised users;
  • Authenticate users and secure accounts against unauthorised access;
  • Communicate with you about your account, security and service updates;
  • Monitor, diagnose and improve the performance and reliability of the Service;
  • Comply with legal obligations and enforce our Terms of Service.

We do not sell your personal data, and we do not use TikTok data for any purpose other than providing the analytics functionality of the Service.

3. Use of TikTok data and API compliance

Our access to and use of TikTok data is governed by the TikTok Developer Terms of Service and TikTok’s policies. We access TikTok data solely to display trend and analytics information within the Service. We do not share TikTok data with third parties except as required to operate the Service or comply with law. If TikTok deactivates our access, or you revoke authorisation, we will stop accessing the relevant TikTok data.

TikTok insights. If an account holder connects insights, we store the encrypted TikTok access token and the organic analytics TikTok returns for that account: follower audience (countries, gender, age, active hours) and, per post, views by country, retention, traffic sources and engagement totals. The account holder can disconnect insights at any time from the account page; disconnecting, or deleting the TikTok account from the Service, revokes the token at TikTok and permanently deletes this stored data.

3a. Use of Meta data (Facebook, Instagram, Threads)

We use Meta data only to let you publish videos you created in the Service to the Facebook Pages, Instagram professional accounts and Threads profile you connected and selected, to show the status and links of those posts, to let you edit or delete them, and to show recent posts and posting limits of those accounts. We publish only when you or a member of your organisation explicitly presses Post and the post is approved; we never post to accounts you did not select. Videos are labelled as AI-generated content on Facebook and Instagram by default. We do not sell Meta data, do not use it for advertising or profiling, and do not share it with third parties except as needed to operate the Service. Our use of Meta data follows the Meta Platform Terms and Developer Policies.

Disconnecting and deletion. You can disconnect a Meta account at any time on the Channels page of the Service, or remove the app in your Facebook, Instagram or Threads settings (“Apps and websites”). When you remove the app, we drop the access tokens immediately. When you send a data deletion request through Facebook, Instagram or Threads, we immediately delete your connections and access tokens in every organisation and show you a confirmation code on this page. Posts already published stay on the platform until you delete them there. You can also request deletion by email (see Section 7).

4. How we share information

We may share information with:

  • Service providers that host and support our infrastructure, bound by confidentiality and data-protection obligations;
  • Authorities, where required by applicable law, legal process or to protect our rights and the security of the Service.

5. Data retention

We retain personal data only for as long as necessary to provide the Service and for legitimate business or legal purposes. When data is no longer needed, we delete or anonymise it. You may request deletion at any time (see Section 7).

6. Data security

We apply appropriate technical and organisational measures to protect data, including encryption in transit, hashed credentials, access controls, and restricting database access to trusted internal networks. No method of transmission or storage is completely secure, but we work to protect your information and review our safeguards regularly.

7. Your rights

Subject to applicable law, you have the right to:

  • Access the personal data we hold about you;
  • Request correction of inaccurate data;
  • Request deletion of your data (“right to be forgotten”);
  • Object to or restrict certain processing;
  • Request a copy of your data in a portable format;
  • Withdraw consent and revoke TikTok, Facebook, Instagram or Threads authorisation at any time.

To exercise any of these rights, contact us at a.kliat@rainmakeragency.ai. You may also disconnect a TikTok account at any time from within your TikTok account settings, which revokes our access to that account’s data, and a Meta account as described in Section 3a.

8. International transfers

Where data is transferred outside the European Economic Area, we ensure appropriate safeguards are in place in line with GDPR requirements.

9. Children

The Service is intended for business use by professionals and is not directed at individuals under the age of 18. We do not knowingly collect personal data from children.

10. Changes to this Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the “Last updated” date at the top of this page and, where appropriate, by additional notice.

11. Contact us

Rainmaker Network LTD — registered in the Republic of Cyprus, registration number HE 415834.
Email: a.kliat@rainmakeragency.ai